Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Critical Threat Advisory: This vulnerability is documented in active Ransomware campaigns. Immediate remediation required.

Technical Severity

CVSS v3.1 Metrics

MEDIUM

5 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Exploitation Likelihood

EPSS Prediction

0.88 %

Predictive Probability

Percentile Rank

74.9 th

Documented as more likely to be exploited than 74.9% of known CVEs.

Detection Date

Sep 13, 2023

Remediation Due

Oct 04, 2023

CISA Catalog Active

Threat Analysis

Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN session with an unauthorized user.

Remediation Directive

Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.

Asset Context

Vendor Identity

Cisco

Affected Product

Adaptive Security Appliance and Firepower Threat Defense

Ransomware Status

Campaign Use Known

Weakness Classification

CWE-288

External Intelligence

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2023-20269